Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: s/KOzje9GZPAJ9M9SH4dJtCPesptwUaCgVdLM2kOHUw=
Subject key identifier: 62:18:BB:1D:65:62:E4:CF:8D:B0:C2:83:66:A0:F9:8D:5C:9B:56:D8
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019849D397E98D049F117EE4892B3A2D0CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: gQJsab+PwIFr0DVpdGrJyM0/1BMAOY8jjF6oOviBDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:97:e9:8d:04:9f:11:7e:e4:89:2b:3a:2d:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=6218bb1d6562e4cf8db0c28366a0f98d5c9b56d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:27:da:82:f4:05:90:73:51:7d:68:43:93:
6a:ce:d3:d0:47:cb:5d:b8:8e:66:8f:96:41:dd:6b:
76:21:75:81:0b:91:f2:d7:96:53:43:7d:2a:53:0e:
61:e2:5e:46:b8:b2:43:a4:d3:9a:71:76:c1:be:4f:
37:8b:e7:e9:60:ee:31:fc:88:d0:4b:3a:89:13:4c:
b0:53:9d:ea:c8:55:c6:6d:40:4b:d6:e3:66:d0:2c:
55:3b:7b:e3:fc:27:a2:74:29:46:2d:20:d8:95:dc:
68:50:ef:8e:85:ba:92:61:a2:99:c3:f2:aa:35:ef:
0b:cd:ce:8d:d2:30:65:0e:d3:52:b4:bc:df:cc:95:
ec:11:45:b0:13:65:d4:21:f4:83:b2:c1:7a:61:51:
40:68:ba:4b:3f:d5:33:33:87:b0:81:da:5b:ff:af:
14:be:fb:98:45:10:ce:e8:46:a3:39:60:43:6b:7f:
6c:76:1d:6d:95:af:d8:6c:d3:a8:78:68:7e:d9:78:
89:50:eb:f9:1c:25:9c:67:51:f0:5f:fb:19:45:95:
0c:f9:fb:3f:40:db:4a:82:b6:c3:66:81:95:29:01:
cd:b1:68:a8:fa:18:35:86:aa:26:5c:31:86:48:f2:
ef:61:ab:97:01:4b:bc:4b:4b:ef:73:84:cf:64:e6:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:BB:1D:65:62:E4:CF:8D:B0:C2:83:66:A0:F9:8D:5C:9B:56:D8
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:88:67:7e:01:79:42:c7:2c:1c:11:80:d5:92:37:c6:cc:
fe:8e:ad:41:36:ed:09:75:96:a6:9c:75:77:7d:6d:b1:39:fc:
7f:70:90:77:5c:5d:fe:16:e7:eb:94:50:03:a2:46:fe:dd:bc:
5d:1e:90:85:2d:57:0f:72:82:58:76:30:d7:61:63:95:b8:95:
d4:6b:53:86:b3:26:a6:8c:ef:d4:b8:7c:14:4a:5e:0c:ce:f4:
b3:ee:a6:cd:51:0b:41:e2:f6:0d:94:f9:2a:81:be:03:2e:a0:
25:23:da:a1:61:58:f7:44:e1:8c:73:c9:af:75:48:cd:ba:02:
f5:16:66:e8:72:0a:75:b9:68:06:43:f3:5b:d0:65:b8:7b:86:
dd:bf:9b:e5:54:94:1f:d1:3e:b5:78:9c:43:1d:0f:b5:30:4b:
52:25:a6:d3:e1:ce:73:75:3a:a3:20:92:58:02:03:cd:7b:d8:
64:5d:82:50:5e:fc:c4:6c:7b:69:cd:ea:b7:6e:a6:c5:8b:91:
cd:96:23:6b:7e:3f:32:ec:d4:c1:c4:27:4c:f2:a9:af:4d:47:
7a:a5:2f:16:df:c8:d6:04:35:34:b6:28:4d:c1:78:b0:50:98:
42:1a:ec:bc:fe:24:7b:10:9e:d4:c8:48:22:07:9f:a2:5d:13:
e0:8e:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:06 2025 by rpki-client